Amendments to the Claims: 



This listing of claims will replace all prior versions, and listings of claims in the 
application. Applicant has submitted a new complete claim set showing marked up 
claims with insertions indicated by underlining and deletions indicated by strikeouts 
and/or double bracketing. 

Listing of Claims: 

1. (Currently Amended) An update service node hav i ng an application 
programm i ng i nt e rfac e for administering the distribution of software updates on th e 
updat e s e rv i c e nod e, the app li cat i on programm i ng i nt e rfac e update service node 
comprising: 

an update store for storing software updates; 

an update web service through which the update service node obtains software 
updates from a parent update service node over a communication network, and through 
which the update service node distributes software updates to child update service 
nodes over the communication network , the update web service being operable to 
create a catalog of software updates, receive a request for the catalog from a particular 
child update service node, and responsively provide a catalog listing a limited set of 
software updates based on a distribution group to which the particular child update 
service node belongs : and 

an administration application programming interface (API) through which an 
administrator defines distribution groups i nc l ud i ng an e va l uat i on group and a g e n e ra l 
group , and establishes distribution rules associated with each group, the distribution 
rules specifying the distribution of software updates to child update service nodes and 
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client computers included in the respective distribution groups, the ru l es assoc i ated 
w i th the eva l uat i on group specify i ng immed i ate distribution to the eva l uat i on group, the 
ru le s assoc i ated w i th the genera l group sp e c i fy i ng w i thho l d i ng d i str i but i on until 
author i zat i on i s r e c ei v e d bas e d on th e e va l uat i on , wherein the administration API is an 
object exposing a plurality of interface calls through which the administrator establishes 
said rules. 

2. (Original) The update service node of Claim 1 , wherein the administration 
API exposes a get configuration interface call which returns a configuration interface 
object for reading and writing software update administration configuration values to 
the update service node. 

3. (Original) The update service node of Claim 2, wherein the configuration 
interface object is an IConfiguration interface object. 

4. (Original) The update service node of Claim 2, wherein the administration 
API exposes a get subscription interface call which returns a subscription interface 
object corresponding to a subscription identifier passed to the get subscription interface 
call. 

5. (Original) The update service node of Claim 4, wherein the subscription 
interface object is an ISubscription interface object. 

6. (Original) The update service node of Claim 4, wherein the administration 
API exposes a get subscriptions interface call which returns a subscription collection 
interface object defined on the update service node. 
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7. (Original) The update service node of Claim 4, wherein the administration 
API exposes a get update interface call which returns a update interface object 
corresponding to an update identifier passed in the get update interface call. 

8. (Original) The update service node of Claim 7, wherein the update 
interface object is an lUpdate interface object. 

9. (Original) The update service node of Claim 7, wherein the administration 
API exposes a get updates interface call which returns an update collection object 
containing update interface objects corresponding to values passed in the get updates 
interface call. 

1 0. (Original) The update service node of Claim 9, wherein the values passed 
to the get updates interface call include a deployed state object and an exclude hidden 
updates Boolean value. 

1 1 . (Original) The update service node of Claim 9, wherein the administration 
API exposes a get computer interface call which returns an client computer object 
corresponding to the a client computer associated with the update service node and that 
was identified in the get computer interface call. 

12. (Original) The update service node of Claim 11, wherein the client 
computer object is an IComputer object. 

1 3. (Original) The update service node of Claim 1 1 , wherein the 
administration API exposes a get computers interface call which returns a computer 
collection object including client computer objects corresponding to client computers 
associated with the update service node. 
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14. (Original) The update service node of Claim 1 3, wherein the 
administration API exposes a get group interface call which returns an target group 
object that was identified in the get group interface call. 

15. (Original) The update service node of Claim 14, wherein the 
administration API exposes a get groups interface call which returns a target group 
collection object including target group objects corresponding to target groups on the 
update service node. 

1 6. (Original) The update service node of Claim 1 , wherein the administration 
API is an lUpdateServer interface object. 

1 7. (Cancelled) 

1 8. (Currently Amended) A software update distribution system for 
distributing software updates, the software update distribution system comprising: 

a software update store storing a set of software updates: 

an update service node operable to receive a product catalog request from a 
particular computer and responsively provide a product update catalog listing a limited 
set of the software updates, the limited set of software updates being only those 
software updates that the particular computer is authorized to distribute based on a 
target group to which the particular computer belongs : and 

an administration application programming interface (API) associated with the 
update service node, wherein the administration API is an interface object exposing a 
plurality of interface calls for controlling the distribution of software updates, the 
administration API including: 

a create computer target group through which at least two target groups 
are defined including an all-computers group and an evaluation target group for 
evaluating software updates prior to distribution to the all-computers group; 
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a get configuration interface call which returns a configuration interface 
object for reading and writing software update administration configuration values to 
the update service node; 

a get subscription interface call which returns a subscription interface 
object defined on the update service node; 

a get update interface call which returns an update interface object 
corresponding to an update identifier passed in the get update interface call; 

a get updates interface call which returns an update collection object 
containing update interface objects corresponding to values passed in the get updates 
interface call; 

a get computer interface call which returns a client computer object 
corresponding to a client computer associated with the update service node and that 
was identified in the get computer interface call; 

a get computers interface call which returns a computer collection object 
including client computer objects corresponding to client computers associated with the 
update service node; 

a get group interface call which returns a target group object that was 
identified in the get group interface call; and 

a get groups interface call which returns a target group collection object 
including target group objects corresponding to target groups on the update service 
node. 



19. (Currently Amended) A computer-implemented method for distributing 
software updates to computing devices in a network, the method comprising: 
through an application programming interface: 

defining a general group of computing devices and an evaluation group 

of computing devices, each of the general group of computing devices and the 
evaluation group of computing devices comprising a respective child update 
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service node configured to distribute software updates to one or more client 
computing devices of the group; 

associating software update distribution rules with each of the general 
group and the evaluation group; 

receiving a software update; and 
based on the software update distribution rules: 

immediately distributing the software update to the child update service 
node of the evaluation group, the child update service node of the evaluation 
group being configured to distribute the software update to client computing 
devices of the evaluation group for evaluation of the software update; 

withholding the software update from the general group of computing 
devices until the software update is authorized for distribution to the general 
group of computing devices based on the evaluation of the software update; and 

after the software update has been evaluated by the evaluation group, 
authenticating a particular child update service node: and 

sending a time-sensitive token to the particular child update service node. 
the time-sensitive token authorizing the particular child update service node to 
request updates for a limited time- 
author i z i ng d i str i but i on of th e softwar e updat e to th e g e n e ra l group of 
c lie nt comput i ng d e v i c e s . 

20. (Currently Amended) The update serv i ce node computer-implemented method of 
Claim 19, further comprising: 

receiving a request for a product update catalog from the particular child update 
service node, the request including the time-sensitive token: 

sending r e qu e st i ng a product update catalog to the particular child update 
service node, the product update catalog listing a limited set of software updates 
available for distribution to the particular child update service node, the limited set of 
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software updates being determined based on the group in which the particular child 
update service node is a member : and 

receiving a selection of se l ect i ng one or more software updates from listed in the 
product update catalog from the particular child update service node . 

21 . (New) The update service node of claim 1 , wherein the update web service is 
further operable to provide selected updates to the particular child update service node 
based on one or more selections from the particular child update service node, the one 
or more selections being identified in the catalog listing a limited set of software 
updates. 
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